# PHP companion
Use PHP 8 with sessions on an HTTPS development host. Upload contact.php and open it directly. For local development run `php -S 127.0.0.1:8088` from this directory.

Use synthetic data. Try a valid sample, a short message, and a request missing the CSRF field. Expect a redirect and session receipt, status 422, and status 403, respectively. The companion never sends mail. It retains only a receipt in the session. The JSON status endpoint returns public service information.

The example demonstrates server-side validation, output escaping, a session token, and POST/Redirect/GET. Keep it separate from exported static sites. Production contact delivery requires a dedicated abuse-control and retention policy.